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In the Claims 

1. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 

comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list. maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that havouniquo 
uqqj narooo and paoGword s re quire unique authentication credentials for each user account 
including an administrator account that is self-configuring and regular accounts with 
varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/px an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list andVoi an unfriendly inbound list only one of 
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which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound lists being uniquely configurable by 

for each user account 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the request- without tho knowledge of th e ua ef, 

a second proxy server without the administraave module or the friendly or the 
unfriendly lists placed between the first proxy server and the Internet te eatod at a gateway 
of tho local a re a n"T""~ v rmt-m Tnrnnwi flnrvioQ Providor of the loonl area network , the 
second proxy server being capable of communicating to a proxy of a destination or 
directly to a destination, said second proxy server having an Internet Protocol address 
rnnfi fMirahlfe only by known only i e a holder of the administrator account or a regular 
account with administrative privileges, 

the first proxy server and the second proxy server have a network communication 

link between them. 

2. (original) The system of claim 1, wherein the second proxy server is a first 
proxy server but has an empty unfriendly outbound list. 

3 . (original) The system of claim 1 , wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 
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4. (previously presented) The system of claim 1, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

5. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 

comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, proxy 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that ttt*e**Hq»e 
ULUiumc: and pJCQWorrtn " ^nire unique »..th ft ntication credentials for each user account 
including an administrator account that is self-configuring and regular accounts with 
varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said fist proxy server having a friendly 
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outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound lists being uniquely configurable for 

by each user account , 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the reques t without tho knowledge of tho n i w , 

a second proxy server without the administrative module and without * the 
friendly or the unfriendly lists placed between the first proxy server and a jesource the 
Internet locatu d at a g mTr my n f n t h - 1— 1 - " " "*"'™- 1r ™ ar fl " Intern e t Sorvico Provider 
t^u> local aroanotwork, the second proxy server being capable of communicating to a 
proxy of a destination or directly to a destination, said second proxy server having an 
Internet Protocol address r^fifmrahle onlvbv fcaown only to a holder of the 
administrator account or a regular account with administrative privileges, 

the first proxy server and the second proxy server have a communication link 
between them? 

and wherein inbound oonunuaiotttioua arc arranged oo that an actual looation of n n 
iui u o i tont rocou iou iu located in an unpublished location that jo a replacement location t o 
w feoh roquooto rejected by rtw fltot proxy oorvor arc rerouted, whe iu ia approved uooro nre 
l -U i in th e fin, i j i • " th " ""fti'Mdlv inbowd list m (] nTU " c , nt by thc fllTt pTm y 
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se rver to tho replaoomont location, and whoroin unapproved usoro oro not Hcte d-m-the 
un friondly inbound Hot a nd hnvft Thrfr n»qn«nt rn - 1 jnMinhftrf ^rffimnn that contoino 
Hmca portant information . 

6. (original) The system of claim 5, wherein the second proxy server is a first 
proxy server but has an empty unfriendly outbound list. 

7. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, pro*y 
chaining routing, adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that havo uniqu e 
uocr namoc and passwords require unique authentication credentials for each user account 
including an administrator account that is self^configuring and regular accounts with 
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varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound lists being uniquely configurable for 
by each user account, 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
by the administrative module and then either approve the request, terminate the request or 
re-route the reques t without the knowledge of tho uo e r, 

and whoroin inbound oommunicationo or e arranged go that on actual location of a 
highly aenpitiv e roaouroo is located in an unpublished location that iG a replacem e nt 
location to which r e quests rejected by the first proxy o e rvor arc r e routed, wh e r e in 
approv e d usero ar e list e d in tho first proicy oervor in tho unfriendly inbound list and or e 
sont by tho proxy server to th e replacem e nt location, whoroin unapproved uaoro ore not 
Uotod in tho unfriendly inbound liot and hav e their request sont to a publiohod adrinw , t hnf 
Gontoino unimportant informatio n, 

8. (original) The system of claim 7, wherein the range of access levels ranges 
from maximum 100% access to full suspension. 

-7- 

PA6E 1 W34 * RCVD AT 7/12/20O5 2:20:20 PM [Eastern Daylight rime] * SVR:USPT0-EFXRF-1/5 * DNIS:8729306 * CSID:212 685 6862 * DURATION (mm-ss);1(W4 



FILE No. 742 07/12 '05 13:06 



ID:NEWMAN a BERGER 



FAX: 212 685 6862 



PAGE 11/ 34 



9. (currently amended) The system of claim 1 , wherein the three types of user 
accounts that havo uniquo uoor namoo and paoowords Teguire unique authentication, 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

10. (currently amended) The system of claim 5, wherein the three types of user 
accounts that havo uniqu e uoor nam e s and paoswordo require unique authentication 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

11. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet and/or for 
controlling inbound requests from the Internet for access to a web site of the system, 
comprising: 
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a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
inbound communications and for outbound communications, has list maintenance 
functions including list editing, list deleting, searching of lists, saving of lists, pre*y 
chaining routing; adding and deleting users, interchanging lists and importing and 
exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that havo uniqu e 
uGor names and paoo words require unique authentication credentials for each user account 
including an administrator account that is self-configuring and regular accounts with 
varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said fist proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, and/or having a friendly inbound list and/or an unfriendly inbound list only one of 
which is active at any given time, the friendly outbound list, the unfriendly outbound list, 
the friendly inbound list and the unfriendly inbound list being uniquely configurable for 
by each user account , and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requesting client and/or of a requested URL against the friendly 
inbound, friendly outbound, unfriendly inbound or unfriendly outbound list maintained 
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by the administrative module and then either approve the request, terminate the request or 
re-route the reques t with o ut tho lmowlndgo of the uso* . 

12. (previously presented) The system of claim 1 1, wherein the first proxy server 
is in each and every user computer. 

13. (previously presented) The system of claim 12, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

14. (previously presented) The system of claim 1 , wherein the first proxy server is 
in each and every user computer. 

15. (previously presented) The system of claim 14. wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

16. (previously presented) The system of claim 5, wherein the first proxy server is 
in each and every user computer. 

17. (previously presented) The system of claim 16, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

18. (previously presented) The system of claim 7, wherein the first proxy server is 
in each and every user computer. 
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19. (previously presented) The system of claim 18, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

20. (previously presented) The system of claim 1, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

21. (previously presented) The system of claim 5, wherein the range of access 
levels ranges from maximum 1 00% access to full suspension. 

22. (previously presented) The system of claim 11, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

23. (previously presented) The system of claim 5, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

24. (previously presented) The system of claim 23, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

25. (previously presented) The system of claim 7, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 
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26. (previously presented) The system of claim 25, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

27. (previously presented) The system of claim 11, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

28. (previously presented) The system of claim 27, wherein the range of access 
levels ranges from maximum 100% access to full suspension, 

29. (currently amended) The system of claim 7, wherein the three types of user 
accounts that havo unique us e r namoG and passwords require unique authe ntication 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

30. (currently amended) The system of claim 11, wherein the three types of user 
accounts that havo uniquo user namos and passwords require unique authe ntication 
credentials for each user account include an administrator account that is self- 
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configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

31. (canceled) 

32. (currently amended) The system of claim 71 34-, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

33. (currently amended) The system of claim 71 34-, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

34. (previously presented) The system of claim 33, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

35. (currently amended) The system of claim 71 3+, wherein the three types of 
user accounts that havo uniqu e us e r namoo and passwords require un ique authentication 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
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accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

36. (canceled) 

37. (currently amended) The system of claim 84 26, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

38. (currently amended) The system of claim 84 36, wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

39. (previously presented) The system of claim 38, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

40. (currently amended) The system of claim 84 56, wherein the three types of 
user accounts that havo unique uoor nam e s and paoowords require unique authenticatio n 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user.account 
namely one anonymous guest user account to be used by general users who have no 
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system-based user name and password. 

41. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists, proxy chaining routing, adding and deleting 
users, interchanging lists and importing and exporting lists* 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that have unity * 
usor names and paoswordo re quire unique authentic ation credentials for each user account 
including an administrator account that is self-configuring_and regular accounts with 
varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said first proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable for by each user account , 

said first proxy server programmed to receive a request from an HTTP client, 
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check the identity of a requested URL against the friendly outbound list or unfriendly 
outbound list maintained by the administrative module and then either approve the 
request, terminate the request or re-route the reques t wiQi u ul dm lm u wlodg p o f the iww . 

a second proxy server without the administrative module or the friendly or the 
unfriendly lists placed between the first proxy server and the Internet t eoatod at a gat e way 
i f-d io lo c al area n r Kv r rY " f ™ Tntri ™" T 9nT1 ™ f j Provider of I tw local area notw o rfr , the 
second proxy server being capable of communicating to a proxy of a destination or 
directly to a destination, said second proxy server having an Internet Protocol address 
^fi fnirahleonlvhv known only to a holder of the administrator account or a regular 
account with administrative privileges, 

the first proxy server and the second proxy server have a network communication 

link between them. 

42. (currently amended) The system of claim 41 . wherein the three types of user 
accounts that have urdquo uo t* names and password* require unique authenticatio n 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

43. (previously presented) The system of claim 41, wherein the range of access 
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levels ranges from maximum 100% access to full suspension. 

44. (previously presented) The system of claim 41 wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

45. (previously presented) The system of claim 44, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

46. (currently amended) A versatile customizable combination system for 
providing filtering of outbound requests for access to web sites on the Internet, 
comprising: 

a plurality of computer users, 

one or a plurality of user computers, each having a dynamically allocated Internet 
protocol address or a static Internet Protocol address, 

an administrative module/interface that includes configuration settings for 
outbound communications, has list maintenance functions including list editing, list 
deleting, searching of lists, saving of lists , proxy chaining routing , adding and deleting 
users, interchanging lists and importing and exporting lists, 

said administrative module located in a user computer for configuring a range of 
access levels and being capable of creating three types of user accounts that hava unique 
tts eg- names and passwords require unique authentication credentials for each user account 
including an administrator account that is self -configuring and regular accounts with 
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varying amounts of administrative privileges, 

a first proxy server in one or a plurality of user computers of a local area network 
with access to the world wide web, each of said fist proxy server having a friendly 
outbound list and/or an unfriendly outbound list only one of which is active at any given 
time, the friendly outbound list and the unfriendly outbound list being uniquely 
configurable |or by each user account , and 

said first proxy server programmed to receive a request from an HTTP client, 
check the identity of a requested URL against the friendly outbound or unfriendly 
outbound list maintained by the administrative module and then either approve the 
request, terminate the request or re-route the request without the knowledge of the user. 

47, (currently amended) The system of claim 46, wherein the three types of user 
accounts that have unique usor nomoo and passwords require uni que authentication 
credentials for each user account include an administrator account that is self- 
configuring, regular accounts with administrative privileges other than the privilege to 
create additional accounts or view information on any other accounts and regular 
accounts without administrative privileges and in addition a fourth type of user account 
namely one anonymous guest user account to be used by general users who have no 
system-based user name and password. 

48. (previously presented) The system of claim 46, wherein the range of access 
levels ranges from maximum 100% access to full suspension. 
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49. (previously presented) The system of claim 46 wherein the system is 
compatible with dialup modem connection to the Internet, a local area network and with 
virtual network connection. 

50. (previously presented) The system of claim 49 v wherein the range of access 
levels ranges from maximum 100% access to full suspension. 

51. (previously presented) The system of claim 1, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

52. (previously presented) The system of claim 5, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

53. (previously presented) The system of claim 7, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

54. (previously presented) The system of claim 11, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

55. (currently amended) The system of claim 61 wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 
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56. (currently amended) The system of claim 71 36, wherein said first proxy 
server is also programmed to register the request in a logfile of all web sites requested by 
a user. 

57. (previously presented) The system of claim 41, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

58. (previously presented) The system of claim 46, wherein said first proxy server 
is also programmed to register the request in a logfile of all web sites requested by a user. 

59. (new) The system of claim L wherein the first proxy server is programmed to 
check the identity of a user who logs into the first proxy server and who presents a unique 
authentication credential prior to checking the identity of the requesting client and/or 
requested URL against the list or lists. 

60. (new) The system of claim 59, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

6L (new) The system of claim 59, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 
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62. (new) The system of claim 1, wherein a third proxy server and/or additional 
proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

63. (new) The system of claim 5, wherein inbound communications are arranged 
so that an actual location of an important resource is located in an unpublished location 
that is a replacement location to which requests rejected by the first proxy server are 
rerouted, wherein approved clients are listed in the first proxy server in the unfriendly 
inbound list and are sent by the first proxy server to the replacement location, and 
wherein unapproved clients are not listed in the unfriendly inbound list and have their 
request sent to a published address that contains unimportant information 

64. (new) The system of claim 63, wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 

65. (new) The system of claim 63, wherein a third proxy server and/or additional 
proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

66. (new) The system of claim 5, wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 

67. (new) The system of claim 5, wherein a third proxy server and/or additional 



-21- 
PAGE 24/34 * RCVD AT 7/12/2005 2:20:20 PM [Eastern Daylight Time] 1 SVR:USPT0-EFXRF-1/5 ■ DNIS:8729306 ■ CSID:212 685 6862 * DURATION (mm-ss):1 0-24 



FILE No.742 07/12 '05 13:10 ID:NEWMAN & BERGER 



FAX: 212 685 6862 



PAGE 25/ 34 



proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

68. (new) The system of claim 63, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

69. (new) The system of claim 68, wherein the first proxy server is programmed* 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

70. (new) The system of claim 68, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

71. (new) The system of claim 5, wherein inbound communications are arranged 
so that an actual location of an important resource is located in an unpublished location 
that is a replacement location to which requests rejected by the first proxy server are 
rerouted> wherein approved clients are not listed in the first proxy server in the friendly 
inbound list and are sent by the first proxy server to the replacement location, and 
wherein unapproved clients are listed in the friendly inbound list and have their request 
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' sent to a published address that contains unimportant information. 

72. (new) The system of claim 71, wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 

73. (new) The system of claim 71, wherein a third proxy server and/or additional 
proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

74. (new) The system of claim 71, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

75. (new) The system of claim 74, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

76. (new) The system of claim 74, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 
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77. (new) The system of claim 5, wherein the first proxy server is programmed to 
check the identity of a user who logs into the first proxy server and who presents a unique 
authentication credential against a valid user account prior to checking the identity of the 
requesting client and/or requested URL against the list or lists. 

78. (new) The system of claim 77, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

79. (new) The system of claim 77, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

80. (new) The system of claim 7, wherein inbound communications are arranged 
so that an actual location of an important resource is located in an unpublished location 
that is a replacement location to which requests rejected by the first proxy server are 
rerouted, wherein approved clients are listed in the first proxy server in the unfriendly 
inbound list and are sent by the first proxy server to the replacement location, and 
wherein unapproved clients are not listed in the unfriendly inbound list and have their 
request sent to a published address that contains unimportant information 

81. (new) The system of claim 80, wherein the first proxy server is programmed 
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to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

82. (new) The system of claim 81, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

83. (new) The system of claim 81, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

84. (new) The system of claim 7, wherein inbound communications are arranged 
so that an actual location of an important resource is located in an unpublished location 
that is a replacement location to which requests rejected by the first proxy server are 
rerouted, wherein approved clients are not listed in the first proxy server in the friendly 
inbound list and are sent by the first proxy server to the replacement location, and 
wherein unapproved clients are listed in the friendly inbound list and have their request 
sent to a published address that contains unimportant information. 

85. (new) The system of claim 84, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
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unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

86. (new) The system of claim 85, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

87. (new) The system of claim 85, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

88. (new) The system of claim 7, wherein the first proxy server is programmed to 
check the identity of a user who logs into the first proxy server and who presents a unique 
authentication credential against a valid user account prior to checking the identity of the 
requesting client and/or requested URL against the list or lists. 

89. (new) The system of claim 88, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists, 

90. (new) The system of claim 88, wherein the first proxy server is programmed 
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that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user, 

91. (new) The system of claim 1 1 , wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

92. (new) The system of claim 91, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

93. (new) The system of claim 91, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

94. (new) The system of claim 41, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists, 

95. (new) The system of claim 94, wherein the first proxy server is programmed, 
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upon a successful authentication of the user's credential, ro use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
the list or lists. 

96. (new) The system of claim 94, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

97. (new) The system of claim 41, wherein a third proxy server and/or additional 
proxy servers forward inbound requests for resources to other proxy servers. 

98. (new) The system of claim 41 ♦ wherein a third proxy server and/or additional 
proxy servers forward the outbound requests for access to web sites to other proxy 
servers. 

99. (new) The system of claim 46, wherein the first proxy server is programmed 
to check the identity of a user who logs into the first proxy server and who presents a 
unique authentication credential against a valid user account prior to checking the identity 
of the requesting client and/or requested URL against the list or lists. 

100 (new) The system of claim 99, wherein the first proxy server is programmed, 
upon a successful authentication of the user's credential, to use a configuration of the 
user's account to check the identity of the requesting client and/or requested URL against 
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the list or lists. 



101. (new) The system of claim 99, wherein the first proxy server is programmed 
that if said first proxy server fails to authenticate the user, then the first proxy server 
offers that user an opportunity to log in as an anonymous guest user. 

102, (new) The system of claim 80 t wherein said first proxy server is also 
programmed to register the request in a logfile of all web sites requested by a user. 
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